Static task
static1
Behavioral task
behavioral1
Sample
NEAS.347a2e5d31ebd56c0ffd9decaf8573d0.exe
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
NEAS.347a2e5d31ebd56c0ffd9decaf8573d0.exe
Resource
win10v2004-20230915-en
General
-
Target
NEAS.347a2e5d31ebd56c0ffd9decaf8573d0.exe
-
Size
14KB
-
MD5
347a2e5d31ebd56c0ffd9decaf8573d0
-
SHA1
d8be4d15137e99fc85e669b742c7956b2ef1c427
-
SHA256
57e930ef29d32502a06b639d48744707efbb7cd7c9db7818a1d104235ccaab47
-
SHA512
2621e2f6f5e41b326cb0a45098f4602ce4bcae970e01f050e916c846f9948c4752c9b5fe0f42529684504ae5e46981cef5ff58b35b0cef7425c807a2c7281f2c
-
SSDEEP
384:Fsr/PusfFmFUAyo140ss8rL7XBFDE045H:c/GIFmFU81hiPBFA
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource NEAS.347a2e5d31ebd56c0ffd9decaf8573d0.exe
Files
-
NEAS.347a2e5d31ebd56c0ffd9decaf8573d0.exe.exe windows:4 windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
.text Size: 11KB - Virtual size: 12KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ